Jennifer Granick, exec. dir.-Stanford Center for Internet and Society, agreed spyware-fighters should be "squeamish" about criminal provisions. "There's definitely a question whether we need [federal] legislation at all," since 95% of spyware activity already is illegal, and a new law could be too narrow, going after only the most egregious behavior, she said.